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Foreword 

This Technical Specification (TS) has been produced by ETSI 3rd Generation Partnership Project (3GPP). 

The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or 
GSM identities. These should be interpreted as being references to the corresponding ETSI deliverables. 

The cross reference between GSM, UMTS, 3 GPP and ETSI identities can be found under 
http://webapp.etsi.org/key/queryform. asp . 
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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3 GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



The present document contains the coding of information necessary for support of location service operation on the 
SMLC-BSS interface layer 3. 

Clause 2 gives the functional definitions and contents of messages for location service operations. Clause 3 gives the 
general format and coding for messages used for location service and the format and coding of information elements 
used for location service operations. 



References 



The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[1] 3GPP TR 21.905: "Vocabulary for 3GPP Specifications". 

[2] 3GPP TS 43.059: "Functional stage 2 description of Location Services (LCS) in GERAN 

(Release 4)". 

[3] 3GPP TS 24.007: "Mobile radio interface signalling layer 3; General aspects". 

[4] 3GPP TS 44.018: "Mobile radio interface layer 3 specification; Radio Resource Control Protocol". 

[4a] 3GPP TS 24.008: "Mobile radio interface layer 3 specification; Core network protocols; Stage 3". 

[5] 3GPP TS 45.008: "Radio subsystem link control". 

[6] 3GPP TS 48.008: "Mobile Switching Centre - Base Station System (MSC-BSS) interface; Layer 3 

specification" . 

[7] 3GPP TS 49.03 1 : "Location Services (LCS); Base Station System AppHcation Part LCS Extension 

(BSSAP-LE)". 

[8] 3GPP TS 44.031: "Location Services (LCS); Mobile Station (MS) - Serving Mobile Location 

Centre (SMLC) Radio Resource LCS Protocol (RRLP)". 



Definitions and abbreviations 



For the purposes of the present document, the abbreviations, terms and definitions given in 3GPP TR 21.905 and 
3GPPTS 43.059 apply. 
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4 Messages functional definitions and contents 

4.1 General 

This sub-clause defines the structure of the messages of the SMLC-BSS layer 3 protocol defined in 3GPP TS 43.059. 
Each definition includes: 

a) a brief description of the message; 

b) a table listing the information elements in the order of their appearance in the message. 
For each IE the table indicates: 

1) the name of the IE (which gives an idea of the semantics of the element), which is used in this and other 
specifications as a reference to the IE within the message; 

2) the name of the type of the IE (which indicates the coding of the value part of the IE), and a reference to a 
description of the value part of the IE; 

3) the presence requirement indication (M, C or O) for the IE, as defined in 3GPP TS 24.007; 

4) the format of the IE (T, V, TV, LV, TLV) as defined in 3GPP TS 24.007; 

5) the length of the IE (or permissible range of lengths), in octets, in the message. The value of the length gives 
the number of octets in the IE following the length and element identifier. Where the length is encoded using 
more than one octet, the high order bit is bit 8 of the first (lowest numbered octet) and the low order bit is bit 
1 of the last (highest numbered octet). 

c) sub-clauses specifying conditions for lEs with presence requirement C or O in the relevant message. Together 
with other conditions specified in 3GPP TS 43.059 this defines when the IE shall be included or not, what 
non-presence of such lEs means, and (for lEs with presence requirement C) the static conditions for presence 
and/or non-presence of the lEs (see 3GPP TS 43.059). 

4.2 Messages 

The following Location Services related messages are exchanged between the SMLC and the BSS: 

- TA Request; 

- TA Response; 

- Reject; 

- Reset; 

- Abort; 

- TALayer3; 

MS Position Command; 

- MS Position Response. 

On the Lb interface the messages are contained in the BSSLAP APDU IE which is encapsulated in the following 
messages as specified in 3GPP TS 49.031: 

- BSSMAP-LE CONNECTION ORIENTED INFORMATION message (for all messages except the TA LAYER 
3 message); 

- BSSMAP-LE PERFORM LOCATION REQUEST message (for the TA LAYER 3 message); 

- BSSMAP-LE PERFORM LOCATION INFORMATION message (for the TA LAYER 3 message). 
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4.2.1 TA Request 

The TA Request is a message from the SMLC to the BSS, requesting BSS to return the timing advance (or access 
delay) of the MS. 

Table 4.1 : TA Request message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 



4.2.2 TA Response 

The TA Response is a message from the BSS to the SMLC. It is a response to TA Request message and contains the 
following information elements. 

Table 4.2: TA Response message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


Serving Cell Identity 


Cell Identity IE/ 5.4 


M 


TV 


3 


Timing Advance 


Timing Advance IE / 5.2 


M 


TV 


2 


Measurement Report 


Measurement Report IE/ 5.12 





TLV 


18 


Enhanced Measurement 
Report 


Enhanced Measurement Report IE / 5.18 





TLV 


20 


Measured Cell Identity 
List 


Cell Identity List IE/ 5.1 7 





TLV 


6toN 



4.2.3 (void) 

4.2.4 (void) 

4.2.5 Reject 

The Reject is a message from the BSS to the SMLC. It is a possible response to TA Request or MS Position Command 
and contains the following information elements. 

Table 4.5: Reject message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


Cause 


Cause IE/ 5.14 


M 


TV 


2 



The following are the expected cause values for Reject message: 

- congestion; 

- channel Mode not supported; 

- positioning procedure not supported; 

- failure for other radio related events; 

- incorrect serving cell identity; 

- BSSAP-LE Segmentation error. 
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4.2.6 Reset 

The Reset is a message from the BSS to the SMLC. It is sent when the Response message contents for a positioning 
request are invahdated (e.g. due to handover) before the positioning procedure was completed. 

Table 4.6: Reset message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


Cell ID 


Cell Identity IE/ 5.4 


M 


TV 


3 


Timing Advance 


Timing Advance IE / 5.2 


M 


TV 


2 


Channel description 


Channel Description IE/ 5.8 


M 


TV 


4 


Cause 


Cause IE/ 5.1 


M 


TV 


2 


Measurement Report 


Measurement Report IE/ 5.12 





TLV 


18 


Enhanced Measurement Report 


Enhanced Measurement Report IE / 5.18 





TLV 


20 


Measured Cell Identity List 


Cell Identity List IE/ 5.17 





TLV 


6toN 


LAC 


Location Area Code IE / 5.19 





TV 


3 



The following are the expected cause values for Reset message: 

- intra-BSS handover; 

- failure for other radio related events; 

- supervision Timer Expired; 

- incorrect serving cell identity. 

4.2.7 Abort 

The Abort is a message either from the BSS to the SMLC or SMLC to the BSS. Upon receiving this signal, either 
SMLC or BSS shall abort ongoing positioning procedure. 

Table 4.7: Abort message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


Cause 


Cause IE/ 5.14 


M 


TV 


2 



The following are the expected cause values for Abort message: 

- failure for other radio related events; 
supervision Timer Expired; 

- inter BSS handover; 

- loss of signalling connection to MS. 
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4.2.8 TA Layers 

The TA Layers is an optional encapsulated message from the BSS to the SMLC that adds the following information in 
Complete layer 3 Information as described in 3GPP TS 48.008. 

Table 4.8: TA Layers message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


Timing Advance 


Timing Advance IE / 5.2 


M 


TV 


2 


IVIeasurement Report 


Measurement Report IE/ 5.12 





TLV 


18 


Enhanced IVIeasurement Report 


Enhanced Measurement Report IE / 5.18 





TLV 


20 


Measured Cell Identity List 


Cell Identity List IE/ 5.17 





TLV 


6toN 



4.2.9 MS Position Command 

The BSSLAP MS Position Command is a message from the SMLC to BSS that contains the following information 
elements. 

Table 4.9: MS Position Command message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


flag 


RRLP flag IE/ 5.15 


M 


TV 


2 


RRLP Info 


RRLP IE/5.16 


M 


TLV 


3toN 



4.2.10 MS Position Response 

The BSSLAP MS Position Response is a message from the BSS to the SMLC that contains the following information 
elements. 

Table 4.10: MS Position Response message content 



Information element 


Type/Reference 


Presence 


Format 


Length 


Message Type 


Message Type IE/ 5.1 


M 


V 


1 


flag 


RRLP flag IE/ 5.15 


M 


TV 


2 


RRLP Info 


RRLP IE/5.16 


M 


TLV 


3toN 


Timing Advance 


Timing Advance IE / 5.2 





TV 


2 


Measurement Report 


Measurement Report IE/ 5.12 





TLV 


18 


Enhanced Measurement Report 


Enhanced Measurement Report IE / 5.18 





TLV 


20 


Measured Cell Identity List 


Cell Identity List IE/ 5.17 





TLV 


6toN 



5 Information element encodings 

This paragraph contains the coding of the signalling elements used. 

The following conventions are assumed for the sequence of transmission of bits and bytes: 

- each bit position is marked as 1 to 8. Bit 1 is the least significant bit and is transmitted first; 

- in an element octets are identified by number, octet 1 is transmitted first, then octet 2 etc. 

When a field extends over more than one octet, the order of bit values progressively decreases as the octet number 
increases. The least significant bit of the field is represented by the lowest numbered bit of the highest numbered octet 
of the field. 

- For variable length elements a length indicator is included, this indicates the number of octets following in the 
element. 
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- All fields within Information Elements are mandatory unless otherwise specified. The Information Element 
Identifier shall always be included. 

All spare bits are set to 0. 

The elements used and their coding are: 



Element 

Identifier 

Coding 


Element name 


Reference 


0000 0001 


Timing Advance 


5.2 


0000 1000 


Reserved (note) 




0000 1001 


Cell Identity 


5.4 


0000 1010 


Reserved (note) 




0000 1011 


Reserved (note) 




0000 1100 


Reserved (note) 




0001 0000 


Channel Description 


5.8 


0001 0001 


Reserved (note) 




0001 0010 


Reserved (note) 




0001 0011 


Reserved (note) 




0001 0100 


Measurement Report 


5.12 


0001 0101 


Reserved (note) 




0001 1000 


Cause 


5.14 


0001 1001 


RRLP Flag 


5.15 


0001 1011 


RRLP IE 


5.16 


0001 1100 


Cell Identity List 


5.17 


0001 1101 


Enhanced Measurement Report 


5.18 


0001 1110 


Location Area Code 


5.19 


NOTE: These values of the codepoints shall not be used as they were used in an earlier version of the 
protocol. 



All Unas signed codes are spare. 

5.1 Message Type IE 

Message Type uniquely identifies the message being sent. It is a single octet element, mandatory in all messages. 
All Unas signed codes are spare. 



87654321 




00000000 


Reserved. 




00000001 


TA REQUEST 




0000001 


TA RESPONSE 




000001 00 


Reserved (note) 




000001 01 


Reserved (note) 




00001 01 


REJECT 




00001 01 1 


RESET 




00001 1 00 


ABORT 




00001 1 01 


TA LAYERS 




00001 1 1 1 


MS Position Command 




0001 0000 


MS Position Response 




NOTE: These values of the codepoints shall not be used as they were 


used 


in an earlier version of the protocol. 





5.2 Timing Advance IE 

This element contains the Timing Advance measured by the BTS. 



8 


7 


6 


1 5 1 4 1 


3 


2 1 1 




Element identifier 


octet 1 


Timing Advance 


octet 2 
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The coding of the timing advance value field is the binary representation of the timing advance in bit periods; 1 bit 
period = 48/13 us, as described in 3GPP TS 44.018 with the difference that all 8 bits are significant (instead of the 
normal 6 bits), which is necessary in order to report TA from extended range cells. To be correct, values over 63 do not 
correspond to a TA used by the MS (maximum is 63). Instead values over 63 correspond to the access delay measured 
by the BTS. 



5.3 



(void) 



5.4 Cell Identity IE 

This element defines the cell identity of the MS serving cell. 



8 


7 


6 


1 5 1 4 1 


3 


2 1 1 




Element identifier 


octet 1 


Cell Identity 


octet 2-3 



The coding of the Cell Identity field is as defined in 3GPP TS 24.008 sub-clause 10.5.1.1 Cell Identity (excluding lEI). 



5.5 
5.6 



(void) 
(void) 



5.7 



(void) 



5.8 Channel Decription IE 

This element defines the physical channel allocation of the MS. 



8 


7 


6 1 5 1 4 1 3 


2 1 1 




Element identifier 


octet 1 


Channel Description 


octets 2-4 



The coding of Channel Description field is as defined in 3GPP TS 44.018 sub-clause 10.5.2.5a Channel Description 
(excluding lEI). 
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5.9 (void) 

5.10 (void) 

5.11 (void) 

5.12 Measurement Report IE 

This element contains the measurement report from the BSS. 
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8|7|6|5|4|3|2|1 




Element identifier 


octet 1 


Length 


octet 2 


Measurement Results 


octet 3-1 8 



The Measurement Results field is encoded as in 3GPP TS 44.018 sub-clause 10.5.2.20 Measurement Result (excluding 
lEI). 



5.13 (void) 



5.14 Cause IE 



This element contains the cause value. 



8 


7 


6 


1 5 1 4 1 


3 


2 1 1 




Element identifier 


octet 1 


Cause value 


octet 2 



The cause field is coded as follows: 



0000 0000 


Congestion 


0000 0001 


Channel Mode not supported 


0000 0010 


Positioning procedure not supported 


0000 0011 


Failure for other radio related events 


0000 0100 


Intra-BSS handover 


0000 0101 


Supervision Timer Expired 


0000 0110 


Inter-BSS handover 


0000 0111 


Loss of signalling connection to MS 


0000 1000 


Incorrect serving cell identity 


0000 1001 


BSSAP-LE Segmentation error 


All unassigned codes are spare. 



5.15 RRLPFIaglE 



This element is coded as: 



8 


7 


6 1 5 1 4 1 


3 


2 


1 1 




Element identifier 


octet 1 






SPARE 






1 Flagi 


octet 2 



The fields are coded as follows: 
Flagl (Octet 2, bit 1): 
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Position Command (SMLC to BSC) or final response (BSC to SMLC). 

1 Not a Positioning Command or final response. 

5.16 RRLPIE 

RRLP IE is coded as: 



8 


7 


1 6 1 5 1 4 1 3 1 


2 1 1 




Element identifier 


octet 1 


Length 


octet 2-3 


RRLP APDU (3GPP TS 44.031) 


octet 4-N 



5.17 Cell Identity List IE 



This element defines the list of cell identities of neighbour cells, for which measurements are reported. The Cell 
Identities are listed in the same order than the corresponding measurements in the (Enhanced) Measurement Report IE. 



8|7|6|5|4|3|2|1 




Element identifier 


octet 1 


Length 


octet 2 


Spare 


Cell identification 
Discriminator 1 


octet 3 


Cell Identification 1 


octet 4-4+p 






Spare 


Cell identification 
Discriminator N 


octet n-1 


Cell Identification N 


octet n-n+q 



The coding of octet 2 is a binary number indicating the Length of the remaining element. The Length depends on the 
Cell identification discriminator i as well as the number of cells to be identified. 

The Cell identification discriminator i is coded as follows: 



0000 
0001 
0010 
0011 



The whole Cell Global Identification, CGI, is used to identify the 2G cells. 
Location Area Code, LAC, and Cell Identify, CI, are used to identify the 2G cells. 
3G Cell identification container 1. 
3G Cell identification container 2. 



All other values are reserved. 

The coding of the Cell Identification i depends on the Cell identification discriminator i. Below the coding of the i-th 
Cell Identification is shown for each Cell identification discriminator (with "i" in the range 1 to n): 

Coding of the i-th Cell Identification for Cell identification discriminator = 0000. 



octet x+1 
octet x+2 
octet x+3 
octet x+4 
octet x+5 
octet x+6 
octet x+7 



8 


1 7 1 6 


1 5 


4 1 


3 1 2 1 1 


MCC dig 2 


MCC dig 1 


MNCdig3 


MCC dig 3 


MNCdig2 


MNCdigl 


LAC 


LAC cont. 


CI value 


CI value cont 



The octet (x+2) bits 5-8 are filled by '1 1 1 1' if 2 digit MNC is used. 

The octets (x+l)-(x+5) are coded as the value part shown in 3GPP TS 24.008, Table 'Location Area Identification 
information element'. 

The octets (x+6)-(x+7) are coded as the value part shown in 3GPP TS 24.008, Table 'Cell Identity information element'. 
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Coding of i-th Cell Identification for Cell identification discriminator = 0001. 



8 



1 



LAC 



LAC cent. 



CI value 



CI value cent 



octet x+1 
octet x+2 
octet x+3 
octet x+4 



The octets (x+l)-(x+2) are coded as the value part shown in 3GPP TS 24.008, Table 'Location Area Identification 
information element'. 

The octets (x+3)-(x+4) are coded as the value part shown in 3GPP TS 24.008, Table 'Cell Identity information element'. 

Coding of the Target ID for Cell identification discriminator = 0010. 

Octets (x+1) to (x+9) shall be ignored by the receiver. 

NOTE: in the 3G Cell identification container 1, the transmitter may send PLMN-ID, LAC, RNC-ID and C-ID to 
identify a 3G cell. 

Coding of the Target ID for Cell identification discriminator = 0011. 

Octets (x+1) to (x+6) shall be ignored by the receiver. 

NOTE: In the 3G Cell identification container 2, the transmitter may send LAC, RNC-ID and C-ID to identify a 
3G cell. 

5.18 Enhanced Measurement Report IE 

This element contains the measurement report from the BSS. 



8 


7 


1 6 1 5 1 4 1 3 1 


2 1 1 




Element identifier 


octet 1 


Length 


octet 2 


Enhanced Measurement Results 


octet 3-1 8 



The Enhanced Measurement Results field is encoded as the contents of the ENHANCED MEASUREMENT REPORT 
message in 3GPP TS 44.018 (excluding the fields: "RR short PD", "Message type" and "Short layer 2 header"). 



5.19 Location Area Code IE 



This element defines the cell identity of the MS serving cell. 



8 


7 


6 1 5 1 4 1 3 


2 1 1 




Element identifier 


octet 1 


Location Area Code 


octet 2-3 



The coding of the Location Area Code field is as defined in 3GPP TS 24.008 sub-clause 10.5.1.3 Location Area 
Identification (excluding lEI, MCC, and MNC). 
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Annex A (informative): 
Change history 



Meeting 


Tdoc 


CR 


Rev 


Subject/Comment 


New version 


September 2002 








Version 5.0.0 based on version 4.3.0 


5.0.0 


December 2002 
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